Which of the following steps should be performed first in a business impact analysis (BIA)?

A.
Identify all business units within an organization

B.
Evaluate the impact of disruptive events

C.
Estimate the Recovery Time Objectives (RTO)

D.
Evaluate the criticality of business functions

Explanation:
“The initial step of the BIA is identifying which business units are critical to
continuing an acceptable level of operations.” Pg 383 Krutz: CISSP Prep Guide: Gold Edition.